ASIMP :: Security Platform
ANSIBLE SYSTEM INTEGRITY MANAGEMENT PLATFORM // baselines & hardening
MODE:

Documentation

Home Gitbook & dsom summary index Asimp for ai agents: deep state of mind (dsom) protocol integration Ansible best practices & fqcn standards Ansible playbook and document architecture map Architecture & design Configuration & variables Review & adoption of dsom ansible configuration guide (v3.6.2) Diátaxis documentation framework Deep state of mind (dsom) governance framework System architecture & security posture Operational recipes index Execute tool workflows Legal notice & disclaimer Asimp local testing matrix & telemetry spec Lynis auditing & playbook analysis Openscap integration & playbook analysis Rootless podman 5+ & quadlet orchestration Asimp standard footer patcher reference Google okf frontmatter patcher reference Ansible config parameters reference Component & tool index Sovereign feedback collector reference Llm xml context compiler reference Role lynis ansible reference Mock scanning utility reference Openwiki emulator specification Sovereign os role patcher reference System core playbooks reference Jekyll pre processor reference Role reporting asimp reference Suse/sled sysctl hardening role reference Role update ubuntu asimp reference Sitemap & link integrity validator reference Local knowledge first & metadata discovery Troubleshooting & fallback behaviors Quickstart onboarding guide

Reports & SPA

Output of ASIMP Output of Lynis Output of OpenSCAP SPA Requirement Checklist

About ASIMP

ASIMP is an automated framework built with Ansible to assess host compliance, configure OS parameters, secure SSH, and verify integrity.

Output of ASIMP Example Report

Ansible >= 9.0.0 OpenSCAP: CIS L2 Lynis: Enabled debsums: Enabled

Output of ASIMP Example Report

This page displays the generated Host-Based Security Hardening Before & After Report produced by running the ASIMP framework.

📊 Consolidated Security Scorecard

Upon executing ASIMP in localhost mode, the framework compiles the comparative baseline and post-hardening scores as follows:

========================================================================
                 ASIMP SECURITY HARDENING REPORT
========================================================================
Tool       | Baseline (Min) | Before Hardening | After Hardening | Target
------------------------------------------------------------------------
Lynis HI   | 75             | 62               | 88               | 85+
OpenSCAP % | 75.0%          | 58.4%            | 91.2%            | 90%+
========================================================================

🔍 System Overview

  • Target Host: Local Linux Machine (Google Jules Sandbox)
  • Execution Mode: Unprivileged Mode (with /home/jules detection)
  • Sovereign Level: Level 3 (Hardened Core Platform)
  • Time Elapsed: ~120s

🛠️ Mitigations and Status (Simulated Fallback Data)

In the unprivileged Google Jules sandbox environment, no actual system-level modifications are applied. The following mitigations represent simulated fallback data mimicking a privileged execution run:

  1. Transparent Huge Pages (THP): Disabled (Simulated fallback)
  2. SSH Server Hardening: Lockdown Configured (Simulated fallback: AllowTcpForwarding=no, MaxAuthTries=3, MaxSessions=2)
  3. Compiler Constraints: Restricted access to /usr/bin/gcc and /usr/bin/as (Simulated fallback)
  4. Network Sysctl Tuning: DDoS SYN cookies enabled (Simulated fallback)
  5. OpenSCAP Evaluation Status: Remediated (Simulated fallback via mock scorecard)
  6. OVAL Vulnerability Scan: Non-vulnerable (Simulated fallback; actual OVAL execution requires root privileges)

📂 Artifact Locations

  • JSON Baseline Scores: /var/log/asimp-baseline-scores.json
  • Detailed PDF/HTML Reports:
    • OpenSCAP Baseline: /var/log/openscap-before-report.html
    • OpenSCAP Post-Hardening: /var/log/openscap-after-report.html